Detailed analysis of Flash file encryption and decoding technology

Encryption | crack

Cracking and anti-cracking are the opposite bodies that must exist at the same time. Like making viruses and protecting against viruses, the words that make the virus never appear openly in some well-connected places, so whenever the virus strikes, the side of the guard is always less than defensive. What we want to see is not sneaking around, but learning practical skills and knowledge from cracking and prevention.

　　First, crack the article

The cracking discussed here includes extracting SWF, cracking encrypted and unencrypted SWF, commonly referred to as "SWF to Fla".

Tools for getting SWF

· Flash Saver-Save SWF in Web page

· Flash file Format Converter (Flashchanger)-Convert an EXE with no shell to SwF

· Flash vampires-use them when they have to.

A wide range of extraction, as long as you can see the Flash window, including shell and shell of the EXE, Web pages and so on. In the use of Flash vampire extraction SWF is not recommended to do other operations, or speed will become extremely slow, poorly configured machines may panic. This is also the current version of the software (v2.2) One of the biggest deficiencies. If you want to abort the program, you can end it in Task Manager.

Use temporary Internet Files (ie cache) to download resources such as MV, SWF, etc.

Occasionally some netizens asked me about how to download the online MV, in fact, the method is very simple, as long as the Temporary Internet Files folder can find most of the network resources to find.

Temporary Internet Files is a temporary folder for IE. Directories generally in C:\Documents and Settings\ your username \local Settings\Temporary Internet Files

Tips for using Temporary Internet files to find resources: first clear Temporary Internet files, and then use IE to open or refresh the Web page where you are looking for resources, such as MV. Then refresh temporary Internet Files can be seen, if the resources are relatively large, need a while, such as downloading after the refresh to see.

Sometimes, some resources are hidden. View the properties of the temporary Internet files to determine that there are files inside, but the contents are not visible. At this point, with WinRAR compressed temporary Internet Files can be seen. In order not to waste time, compression, compression, select "Storage." In order to facilitate search, you can extract the compressed temporary Internet Files to another directory, which is now at a glance, distributed in the Content.ie5 folder under the four subfolders.

You can move temporary Internet Files to other partitions, reducing the burden on the system partition and making it easier to find. The Move method is as follows:

Internet Options → general tab → in the Internet temporary files area click settings → move folders → Select a partition, for example, select D to move temporary Internet files to the root of D disk. Finally, you will be prompted to reboot, which is not a reboot, but a logoff. Remember to save the rest of your current work and press OK to log off.

　　extract flash from Word

Test environment: windowsxp/office2003

• Requires a 16-in-edit tool Winhex

• Open a Word document containing flash, click the "Design mode" button in the Control Toolbox to enter design mode, select Flash in Word, copy and paste to any folder, and you will see a "fragment" file.

• Open Winhex, pull the fragment file into Winhex, click the Drop-down menu "search" → "find 16", search "465753", right-click the "4" position in the search to "465753" and select "Start of block".

• Continue to "search" → "find 16 in Value", Search "3a5c", then press and hold F3 until "3a5c is not found", click "Yes", right-click the "C" position in the last search for "3a5c", and select "End of Block selection". (Note: A few cases may not search for "3a5c", then search for "3 a" or "5C", the same method).

• In the selection of any place to click the right button → edit → copy selection → Enter a new file → input file name (such as test.swf) → save.

　　Common cracking tools

When it comes to cracking, many friends will think of the popular flash-elves. The following are commonly used cracking tools, according to the frequency of my use, respectively:

• Shuo Sothink (SWF decompiler)

· Action Script Viewer (ASV)

· Imperator FLA (with user translated as "Roman Ruler")

This is the first I know to restore the SWF tool, but has been concerned about also did not find more than 2.0 cracked version, only 1.6.9.8 of the cracked version, this is already 3 years ago version, only for Flash6.0 below valid. )

• Master's Hammer (Sothink SWF quicker)

The above four paragraphs, to decompiler most commonly used. ASV Although strong, but in the practical aspect is inferior to decompiler, this should also be why for several years Decompiler can be popular for a long time. and ASV deal with Flashincrypt encrypted SWF is easy, this greatly make up for the lack of decompiler.

Many netizens know to use ASV to view SWF, but do not know how to use it to restore SWF to FLA, take 5.01 version as example, just two steps:

• Open the SWF file waiting to be cracked (support for drag-and-drop opening), Output reconstruction data (File→export Rebuild (JSFL) ...) To a directory, for example: Desktop \ Create a new folder.

* Double-click "REBUILDCOMMAND.JSFL" in the directory, the system will start the Flash rebuild FLA file. Depending on the complexity of the original SWF file, the time required to rebuild the FLA will vary.

　　crack PostScript

Cracked SWF, relying mainly on off-the-shelf tools, a variety of tools to use, a not to try another, if the author is intentionally encrypted, depending on the level of the cracker, in the acquisition of SwF will encounter scale can be small difficulties, in the crack will inevitably spend a little bit of thought. If you encounter the SWF Encrypt encrypted works, only to the as helpless.